Privacy Policy

1. What we collect

• Account: email address, username, display name, date of birth, and your password (stored only in scrambled form; we can't read it). If you turn on two-step login, an encrypted key for your authenticator app.
• Profile: bio, chat colour, profile picture and banner. Pictures are re-drawn when you upload them, which removes hidden data such as phone location.
• What you do on Thrill: streams and replays, chat messages, whispers (private messages), posts, likes, follows, blocks, reports, Sparks given and received.
• Safety records: warnings, bans, reports and staff actions, kept so moderation is fair and consistent.
• Technical: your network (IP) address and browser type, used to stop password guessing and spam and to fix crashes.
• Payments (when switched on): handled by our payment provider. We keep what was bought and when, but never your full card details. Payout details for creators who cash out.

2. Why we use it

• To run your account and the features you use (this is our contract with you).
• To keep Thrill safe, including protecting under-18s, handling reports, and preventing fraud and abuse (our legitimate interests, and legal duties).
• To pay creators and keep financial records the law requires.
• To send account emails, such as password reset links. No marketing emails unless you've asked for them.

3. Who can see what

• Public: your username, display name, pictures, bio, follower counts, streams, replays you haven't hidden, posts, and chat messages in public channels.
• Private: whispers are seen by you and the other person. Staff may read them only when investigating a report or a safety risk.
• Never shown: your email, date of birth, password, and network address.
• Staff: moderators see what they need to handle reports. Only the owner can see payment and earnings information.

4. Companies that help us run Thrill

• Hetzner (Germany) hosts Thrill's servers and stores the data.
• Resend sends account emails, if email is switched on.
• Google or GitHub, only if you choose to sign in with them.
• Our payment provider (such as PayPal or Stripe), when payments are switched on.
• We may share information with the police or authorities when the law requires it, or when someone may be in danger, especially a child.

5. How long we keep it

• Replays: 7 days, then deleted automatically (or sooner if you delete them).
• Records of failed sign-ins: about a day. Password reset links: they stop working after an hour.
• Server backups: 14 days.
• Your account and content: while you have an account. When you delete it we remove it, except safety records and anything the law makes us keep, such as payment records (usually 6 years).

6. Cookies and similar

We use one essential cookie to keep you signed in, and your browser's storage for small preferences (like whether chat is open). No advertising or tracking cookies, so there's no cookie banner.

7. Under-18s

Thrill is for people 13 and over. Under-18s get safer settings automatically: no streaming, Sparks or payments, and strangers can't whisper them. We don't knowingly keep accounts for under-13s. If you think a child under 13 has an account, tell us at the contact address shown on this page (coming soon); until then, use the 🚩 Report button and we'll remove it.

8. Your rights

Under UK and EU data protection law you can ask to see, correct, delete or download your information, or object to how we use it. Email the contact address shown on this page (coming soon); until then, use the 🚩 Report button from your account email and we'll reply within a month.

You can also complain to the UK Information Commissioner's Office (ico.org.uk), or your local data protection authority.

9. Changes

We'll update this page when how we use data changes, and tell you on Thrill about important changes. See also our Terms of Service and Community Guidelines.